Unscored severity · published Sep 2, 2005
CVE-2005-2777
Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field
–
CVSS
12.2%
EPSS
No
On KEV
Description
Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LG
Looking Glass · Looking Glass
2004-04-27 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2777
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2777
de-neef.net
http://de-neef.net/articles.php?id=2&page=2
marc.info
http://marc.info/?l=bugtraq&m=112516327607001&w=2
Exploit
http://rgod.altervista.org/lookingglass.html
Vendor Advisory
http://secunia.com/advisories/16607/
Exploit
http://www.securityfocus.com/bid/14682
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/22045
More from Looking Glass
–
CVE-2005-2776
Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2)…